My guest network actually is on a separate VLAN and all devices on the guest network are isolated so they can't communicate with each other. In other words, my phone won't connect to the Kasa device...

I would like to know if this is possible as well. I have a home office with high security needs and have to keep my IoT devices on a separate network.